Skip to content

Commit 405edb9

Browse files
committed
add iam auth method for kubeconfig
1 parent b24596e commit 405edb9

File tree

1 file changed

+40
-0
lines changed

1 file changed

+40
-0
lines changed

docs/resources/k8s_cluster.md

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,24 @@ resource "scaleway_k8s_pool" "john" {
109109
size = 1
110110
}
111111
112+
# Authentication method 1: with IAM token (recommended)
113+
data "scaleway_iam_user" "george" {
114+
115+
}
116+
resource "scaleway_iam_api_key" "ada" {
117+
user_id = data.scaleway_iam_user.george.id
118+
}
119+
resource "null_resource" "kubeconfig" {
120+
depends_on = [scaleway_k8s_pool.john] # at least one pool here
121+
triggers = {
122+
host = scaleway_k8s_cluster.joy.kubeconfig[0].host
123+
token = scaleway_iam_api_key.ada.secret_key
124+
cluster_ca_certificate = scaleway_k8s_cluster.joy.kubeconfig[0].cluster_ca_certificate
125+
}
126+
}
127+
########################################################
128+
129+
# Authentication method 2: legacy
112130
resource "null_resource" "kubeconfig" {
113131
depends_on = [scaleway_k8s_pool.john] # at least one pool here
114132
triggers = {
@@ -117,6 +135,7 @@ resource "null_resource" "kubeconfig" {
117135
cluster_ca_certificate = scaleway_k8s_cluster.joy.kubeconfig[0].cluster_ca_certificate
118136
}
119137
}
138+
########################################################
120139
121140
provider "kubernetes" {
122141
host = null_resource.kubeconfig.triggers.host
@@ -150,6 +169,24 @@ resource "scaleway_k8s_pool" "john" {
150169
size = 1
151170
}
152171
172+
# Authentication method 1: with IAM token (recommended)
173+
data "scaleway_iam_user" "george" {
174+
175+
}
176+
resource "scaleway_iam_api_key" "ada" {
177+
user_id = data.scaleway_iam_user.george.id
178+
}
179+
resource "null_resource" "kubeconfig" {
180+
depends_on = [scaleway_k8s_pool.john] # at least one pool here
181+
triggers = {
182+
host = scaleway_k8s_cluster.joy.kubeconfig[0].host
183+
token = scaleway_iam_api_key.ada.secret_key
184+
cluster_ca_certificate = scaleway_k8s_cluster.joy.kubeconfig[0].cluster_ca_certificate
185+
}
186+
}
187+
########################################################
188+
189+
# Authentication method 2: legacy
153190
resource "null_resource" "kubeconfig" {
154191
depends_on = [scaleway_k8s_pool.john] # at least one pool here
155192
triggers = {
@@ -158,6 +195,7 @@ resource "null_resource" "kubeconfig" {
158195
cluster_ca_certificate = scaleway_k8s_cluster.joy.kubeconfig[0].cluster_ca_certificate
159196
}
160197
}
198+
########################################################
161199
162200
provider "helm" {
163201
kubernetes {
@@ -350,6 +388,7 @@ resource "scaleway_k8s_cluster" "jack" {
350388
name = "jack"
351389
version = "1.18.0"
352390
cni = "cilium"
391+
delete_additional_resources = true
353392
354393
default_pool {
355394
node_type = "DEV1-M"
@@ -365,6 +404,7 @@ resource "scaleway_k8s_cluster" "jack" {
365404
name = "jack"
366405
version = "1.18.0"
367406
cni = "cilium"
407+
delete_additional_resources = true
368408
}
369409
370410
resource "scaleway_k8s_pool" "default" {

0 commit comments

Comments
 (0)